PowerShell

Use this page for PowerShell quick references and security analyst command examples. Long-form PowerShell learning resources live in Learn to Code.

{% content-ref url="../learn-to-code.md" %} learn-to-code.md {% endcontent-ref %}

Cheatsheets

{% embed url="https://assets.contentstack.io/v3/assets/blt36c2e63521272fdc/bltf146e4f361db3938/5e34a7bc946d717e2eab6139/power-shell-cheat-sheet-v41.pdf" %}

{% embed url="https://wiki.sans.blue/Tools/pdfs/PowerShell.pdf" %}

• SANS Get-WinEvent Cheatsheet
• SOC Analyst Scrolls: PowerShell
• SOC Analyst Scrolls: One-Liners

Pages in This Section

{% content-ref url="common-commands.md" %} common-commands.md {% endcontent-ref %}

Legacy / Archived Resources

These resources may still explain useful concepts, but they reference older PowerShell versions.

• Layman's Guide to PowerShell 2.0 Remoting
• Mastering PowerShell v2
• PowerShell 2.0 - One CMDLET At A Time